Critical Denial of Service Vulnerabilities in Lasso Affecting Ubuntu Releases

Critical Denial of Service Vulnerabilities in Lasso Affecting Ubuntu Releases

First seen 21 Nov 2025, 11:20 UTC UbuntuLinuxsecurity 43.7

Article Content

Browse articles
ThreatCluster

Ubuntu versions 25.04, 24.04 LTS, and 22.04 LTS are affected by critical vulnerabilities in the Lasso library. These vulnerabilities allow remote attackers to exploit malformed SAML responses, potentially causing a denial of service. Two specific CVEs have been identified: CVE-2025-46404 and CVE-2025-46705.